Skip to contentNetapp vulnerabilities
Products
Show 140 moreShow less
Newest
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...CVE-2020-10029Fix available5.5 Medium
- fasterxml jackson-databind, netapp oncommand api services, steelstore cloud integrated storage +1 more +3 morePolymorphic deserialization of malicious object in jackson-databindCVE-2019-14893Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9546Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +13 more +15 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9547Public exploitFix availableEPSS 18.4%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9548Public exploitFix availableEPSS 18.9%9.8 Critical
- netapp oncommand cloud managerOnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by...CVE-2019-172759.8 Critical
- netapp fas 8300/8700 and aff a400 baseboard management controller, all flash fabric-attached storage a400 firmware, fabric-attached storage 8300 firmware +1 more +3 moreNetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x...CVE-2019-172747.8 High
- linux kernel, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture...CVE-2020-9391Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the Linux kernel through 5.5.6. set_fdc in drivers/block/floppy.c...CVE-2020-9383Fix available7.1 High
- apache tomcat, geode, blackberry good control +18 more +20 moreImproper Privilege Management in TomcatCVE-2020-1938In KEVPublic exploitFix availableEPSS 99.3%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- apache tomcat, tomee, debian linux +13 more +15 morePotential HTTP request smuggling in Apache TomcatCVE-2019-17569Fix available4.8 Medium
- sqlite, canonical ubuntu linux, netapp cloud backup +11 more +13 moreIn SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference...CVE-2020-9327Fix available7.5 High
- ibm db2, db2 for linux- unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2020-41357.5 High
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +7 more +9 moreext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows...CVE-2020-8992Fix available5.5 Medium
- intel converged security management engine firmware, netapp steelstore cloud integrated storage +1 moreImproper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12...CVE-2019-145986.7 Medium
- netapp snap creator frameworkNetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct...CVE-2016-57104.6 Medium
- fasterxml jackson-databind, debian linux, huawei oceanstor 9000 firmware +5 more +7 moreDeserialization of Untrusted Data in jackson-databindCVE-2020-8840Public exploitFix availableEPSS 26.6%9.8 Critical
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...CVE-2020-8648Fix available7.1 High
- python, canonical ubuntu linux, netapp active iq unified manager +3 more +5 moreLib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...CVE-2019-9674Fix available7.5 High
- gnome librsvg, canonical ubuntu linux, debian linux +3 more +5 moreIn xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause...CVE-2019-20446Fix available6.5 Medium
- netapp oncommand system managerNetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary...CVE-2013-33227.2 High
- netapp e-series santricity os controller software, e-series santricity os controller +1 moreE-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability...CVE-2019-172736.5 Medium
- netapp oncommand system managerNetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary...CVE-2013-33217.5 High
- netapp oncommand system managerCross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows...CVE-2013-3320Public exploit6.1 Medium
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 moreUndertow vulnerable to Uncontrolled Resource ConsumptionCVE-2019-14888Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in button_open in login/logind-button.c in systemd before 243. When...CVE-2019-20386Fix available2.4 Low
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- debian linux, linux kernel, netapp 8300 firmware +11 more +13 moreThe flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device...CVE-2019-18282Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2020-2694Fix available3.1 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2686Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2679Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2660Fix available4.9 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2659Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions...CVE-2020-2654Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...CVE-2020-2627Fix available6.5 Medium
- oracle graalvm, oracle corporation java, canonical ubuntu linux +25 more +27 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2020-2604Fix available8.1 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2601Fix available6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2593Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2590Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2589Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2020-2588Fix available4.9 Medium
- oracle corporation java, netapp active iq unified manager, cloud backup +12 more +14 moreVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version...CVE-2020-2585Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported...CVE-2020-2584Fix available4.4 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2020-2583Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2020-2580Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2579Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2577Fix available4.9 Medium
- Show moreLoading…